Privacy Policy

Effective date: June 28, 2026

undef games is operated by MindTenet™ LLC (“we”, “us”), registered at 8225 SW Cirrus Dr, Beaverton, OR 97008, United States. This policy explains what we collect across our websites, apps, accounts, tools, and services, why, and your choices.

Information we collect

• Account and identity data. When you create or use an account: your name, email address, and whether it’s verified; profile image; and security settings such as passkeys and two-factor authentication. We keep session records including IP address and device/browser (user-agent) for security.
• Profile data you choose to add. Such as display name, bio, avatar, website, a contact email, phone number, and notification preferences (email, SMS, and WhatsApp, where offered).
• Linked third-party logins. If you sign in with Discord, GitHub, or Google, we receive basic identifiers from that provider to connect your account. You can unlink these in your settings.
• Purchase and billing data. Orders, entitlements, wallet balances, subscriptions, and — for payments — data handled by our processors. Payments run through Stripe (and, for creator payouts, Stripe Connect), which act as PCI-DSS service providers; we never see or store your full card or bank-account number, only a token and limited metadata (such as the last four digits and card brand). For tax, we may collect billing country/region and, for sellers, tax identifiers and required tax-form information.
• Content you create or upload. Such as tables, sprites, configurations, and files you import; where you enable cloud sync, this is stored on our infrastructure (see below).
• Usage and device data. Pages and features used, IP address, and similar, processed by our hosting and CDN provider, Cloudflare, and used for analytics to understand and improve the Services.

How we use information

To create and secure your account; provide, operate, and improve the Services; process purchases, subscriptions, wallet activity, and creator payouts; deliver and protect purchased content; prevent fraud and abuse; provide support; send service and (where you allow) marketing messages; and meet legal, tax, and accounting obligations. We do not sell your personal information.

Who we share it with

Only with service providers who help us operate, under their own terms and on our behalf:

• Stripe / Stripe Connect — payments, subscriptions, and creator payouts.
• Cloudflare — hosting, CDN, and storage (including D1 and R2 for accounts, content, and cloud sync).
• Email/notification providers — to send account and service messages.
• Identity providers you connect (Discord, GitHub, Google) — only to link your chosen accounts.

We may also share information to comply with law, enforce our Terms, or protect our users and the Services. If we sell content on behalf of a creator, we share the limited information needed to fulfil and support your purchase.

Cookies and analytics

We use strictly necessary cookies to run the site and keep you signed in, and analytics cookies to understand how the Services are used. You can control or block cookies in your browser; blocking some may affect how the Services work.

Data retention

We keep personal information only as long as needed for the purposes above. We retain transaction, tax, and financial records for as long as required by law — up to 13 years — and delete or anonymize other personal information once it’s no longer needed. Some records are kept longer where needed for security, fraud prevention, or to resolve disputes.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can edit much of your profile and unlink logins in your account settings. To exercise other rights, contact us below. Note that we may need to keep certain records (such as financial records) even after a deletion request, as the law allows.

Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we’ll address it.

International operation

Our Services are operated from the United States (Oregon), and we use providers (such as Cloudflare and Stripe) that may process data in other countries. If you use the Services from outside the United States, you consent to processing your information in the United States and other countries where we or our providers operate.

Changes

We may update this policy and will revise the effective date above when we do. Material changes will be highlighted where appropriate.

Contact

Questions or requests: support@undef.games, or by mail at MindTenet™ LLC, 8225 SW Cirrus Dr, Beaverton, OR 97008, United States.